Java Software Government Warning

dailynightly.nbcnews.com/_news/2013/01/1...t-and-solutions?lite

Update 11 is meant to fix the most recent security problem with Java.

To be safe from the Java monster... disable Java for your browser. done.

Fix from Java/Oracle is out for this issue.

Wingcmdr77 wrote: Fix from Java/Oracle is out for this issue.

Just read on Arstechnica that the 7u11 patch only did a halfway job of fixing the security hole.

Still a good idea to leave Java disabled in your browser, and if you don't have any Java related programs.. ie Minecraft uninstall altogether.

L0rdG1gabyt3 wrote:

Wingcmdr77 wrote: Fix from Java/Oracle is out for this issue.

Just read on Arstechnica that the 7u11 patch only did a halfway job of fixing the security hole.

Still a good idea to leave Java disabled in your browser, and if you don't have any Java related programs.. ie Minecraft uninstall altogether.

Yes me LorgGigabyte, got Java disabled and games deleted that rely on it. Sound Advice, can we get some thank yous for one of our top notch contributors and little old me for posting them! I'll be the first, thanks Josh!

L0rdG1gabyt3 wrote:

Wingcmdr77 wrote: Fix from Java/Oracle is out for this issue.

Just read on Arstechnica that the 7u11 patch only did a halfway job of fixing the security hole.

Still a good idea to leave Java disabled in your browser, and if you don't have any Java related programs.. ie Minecraft uninstall altogether.

Yeah they essentially just changed that default security settings show it was click to enable didn't they?

Lersar wrote: Yeah they essentially just changed that default security settings show it was click to enable didn't they?

That was part of it. It was something they should have done a long time ago.

The vulnerability stemmed from flaws in two parts of the Java code base: one involving the findclass method and the other involving the invokeWithArguments() method. While Sunday's patch fixed the latter issue, the findclass method can still be used to get references to restricted classes, leaving a hole that attackers can exploit.